Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d4a714f3-d6ab-3784-91ec-aa3610979901.roa
File:                     d4a714f3-d6ab-3784-91ec-aa3610979901.roa (raw, json)
Hash identifier:          ph/YxKty1hapNC8ptjh8a64z7zXv3BPQdov6G5ZGH/Q=
Subject key identifier:   5B:AA:E0:37:C0:98:84:95:6B:43:FB:4F:B5:52:7D:38:2F:62:0A:9E
Certificate issuer:       /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
Certificate serial:       010D0C9F43285849D594DDA7EC5AC27B51BAEB40
Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d4a714f3-d6ab-3784-91ec-aa3610979901.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     19905
IP address blocks:        104.250.64.0/19 maxlen: 24
                          147.194.0.0/16 maxlen: 24
                          192.235.128.0/17 maxlen: 24
                          209.163.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:dd:a7:ec:5a:c2:7b:51:ba:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=b6af4f00-ca1e-48b6-956a-43aeb1d491c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:2d:7c:e0:e4:2a:fe:33:46:f5:ed:40:65:
                    27:3b:5b:97:cb:17:30:1a:bf:78:a9:0a:bd:b8:11:
                    42:a0:f4:45:66:b1:fa:bf:51:e1:ac:85:cb:1c:d4:
                    63:d7:62:be:5a:5c:ef:86:73:67:32:90:a8:ac:9c:
                    c4:54:8e:83:45:1f:d9:72:ce:ef:12:e8:96:a3:98:
                    1e:70:ab:76:4f:ca:50:2c:22:98:83:56:89:e7:eb:
                    32:96:a2:c3:de:0d:30:d4:6b:1b:55:03:47:fe:10:
                    48:25:1f:b8:54:6f:14:72:66:1c:5c:12:ba:65:fa:
                    e8:e7:cf:6e:35:ba:cf:14:46:30:3c:d7:ee:24:f3:
                    6f:81:59:68:dc:f8:45:5f:47:fb:e2:7f:95:30:e0:
                    ea:3b:86:2f:6c:63:58:87:cd:3c:83:3e:bb:13:6b:
                    1f:d8:f6:0b:aa:11:5f:d9:2c:51:35:ee:10:47:c9:
                    f4:3a:16:34:a6:16:08:52:3f:10:70:e3:8d:c6:7d:
                    69:19:73:b9:dd:b2:51:b9:8f:e8:8b:6f:80:5c:67:
                    37:30:f8:31:a8:4c:a9:fa:e3:fc:37:f3:1a:ca:11:
                    da:e4:fa:5e:33:78:24:17:15:98:5d:d4:ba:99:13:
                    a3:ad:7a:be:f7:44:a9:24:bf:cc:a0:31:88:fe:ae:
                    e0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AA:E0:37:C0:98:84:95:6B:43:FB:4F:B5:52:7D:38:2F:62:0A:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/d4a714f3-d6ab-3784-91ec-aa3610979901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl

            X509v3 Authority Key Identifier:
                keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.64.0/19
                  147.194.0.0/16
                  192.235.128.0/17
                  209.163.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:d0:84:c3:16:41:22:f1:fe:7f:38:d5:49:c7:d2:29:ef:44:
         9f:90:9c:4c:07:04:a6:8a:64:f1:e4:83:b6:ac:05:dc:b0:06:
         bf:72:c6:46:be:57:79:68:52:2b:7b:47:de:6b:a8:21:3c:82:
         db:26:65:4b:42:b4:3e:7a:3f:b6:84:e4:7b:e9:59:81:9b:5d:
         02:41:7b:01:fe:d0:80:8c:71:5c:a7:cc:1f:37:32:3c:d7:93:
         47:82:07:43:f9:61:61:fb:52:28:4b:95:b9:a6:4f:73:34:99:
         e5:ab:2e:1f:63:93:80:27:14:22:89:a7:c5:38:61:e7:87:a2:
         65:92:09:bc:da:35:ee:94:a8:78:89:b1:1d:63:b8:07:cb:86:
         9a:01:50:d7:40:27:d1:f1:3a:b0:f3:b8:d5:cc:1e:0e:6a:66:
         56:59:45:12:4d:6e:3b:5c:ce:76:ad:d9:76:83:bc:5d:09:c1:
         c6:0a:b8:1d:2a:e7:11:9c:59:fb:63:fc:c8:47:00:71:e9:23:
         c1:1a:c2:a1:e8:97:1f:6f:e2:d4:9f:48:76:90:76:5d:61:cc:
         65:ea:e9:76:ce:56:58:90:90:a6:60:8b:bf:d6:d6:d6:d2:82:
         39:6c:97:3a:ab:d8:30:b9:aa:46:0b:00:1a:53:d3:28:cf:98:
         5f:bc:a1:c6
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnVlN2n7FrCe1G660AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU2NTNmMzctNGIyMi00MGEzLWE4YmQtZTcwZjIwOGMw
ZWZiMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
YjZhZjRmMDAtY2ExZS00OGI2LTk1NmEtNDNhZWIxZDQ5MWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok8tfODkKv4zRvXtQGUnO1uXyxcwGr94qQq9
uBFCoPRFZrH6v1HhrIXLHNRj12K+WlzvhnNnMpCorJzEVI6DRR/Zcs7vEuiWo5ge
cKt2T8pQLCKYg1aJ5+sylqLD3g0w1GsbVQNH/hBIJR+4VG8UcmYcXBK6Zfro589u
NbrPFEYwPNfuJPNvgVlo3PhFX0f74n+VMODqO4YvbGNYh808gz67E2sf2PYLqhFf
2SxRNe4QR8n0OhY0phYIUj8QcOONxn1pGXO53bJRuY/oi2+AXGc3MPgxqEyp+uP8
N/MayhHa5PpeM3gkFxWYXdS6mROjrXq+90SpJL/MoDGI/q7grwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFFuq4DfAmISVa0P7T7VSfTgvYgqeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1
M2YzNy00YjIyLTQwYTMtYThiZC1lNzBmMjA4YzBlZmIvZDRhNzE0ZjMtZDZhYi0z
Nzg0LTkxZWMtYWEzNjEwOTc5OTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGU2NTNmMzctNGIyMi00MGEzLWE4
YmQtZTcwZjIwOGMwZWZiLzRlNjUzZjM3LTRiMjItNDBhMy1hOGJkLWU3MGYyMDhj
MGVmYi5jcmwwHwYDVR0jBBgwFoAUIiOW/w0X1WDrC+ORelaadJKAwRgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1M2YzNy00YjIyLTQwYTMtYThiZC1lNzBm
MjA4YzBlZmIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwQFaPpAAwMA
k8IDBAfA64ADBAXRo0AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA0tCEwxZBIvH+fzjVScfSKe9En5CcTAcE
popk8eSDtqwF3LAGv3LGRr5XeWhSK3tH3muoITyC2yZlS0K0Pno/toTke+lZgZtd
AkF7Af7QgIxxXKfMHzcyPNeTR4IHQ/lhYftSKEuVuaZPczSZ5asuH2OTgCcUIomn
xThh54eiZZIJvNo17pSoeImxHWO4B8uGmgFQ10An0fE6sPO41cweDmpmVllFEk1u
O1zOdq3ZdoO8XQnBxgq4HSrnEZxZ+2P8yEcAcekjwRrCoeiXH2/i1J9IdpB2XWHM
Zerpds5WWJCQpmCLv9bW1tKCOWyXOqvYMLmqRgsAGlPTKM+YX7yhxg==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:26:55 2025 by rpki-client